$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft File: cjdHbP3kFQq5UJerug_t7UKtuas.mft (raw, json) Hash identifier: AT+jSfP4YHNTirALqtPoydztN4h1D/Q4Ag43ffWkRzY= Subject key identifier: 1A:E0:11:42:04:52:68:F5:93:25:A9:73:73:74:D8:27:16:E5:B8:4F Authority key identifier: 72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB Certificate issuer: /CN=A91F4FE6/serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Certificate serial: 0A43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft Manifest number: 0A2B Signing time: Wed 22 Oct 2025 20:26:13 +0000 Manifest this update: Wed 22 Oct 2025 20:26:12 +0000 Manifest next update: Wed 29 Oct 2025 20:26:12 +0000 Files and hashes: 1: cjdHbP3kFQq5UJerug_t7UKtuas.crl (hash: 6Q0lJnRLqj8LWI7VOFoJTuxco1+qxEeKeUSBM1/OTPU=) 2: B42A4FEE9A0611F0A22A7A5EC4F9AE02.roa (hash: wvtmiBqknG0Ex14oXMBXLdzRkgI1rAedN0Py7FPTv0Q=) 3: A6C9DA80974111F08BFA4E71C4F9AE02.roa (hash: MB21rZ7H3QGjZTNUAylWX5noldEmD6A8ZjfIzMujaJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2627 (0xa43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4FE6, serialNumber=7237476CFDE4150AB95097ABBA0FEDED42ADB9AB Validity Not Before: Oct 22 20:26:12 2025 GMT Not After : Oct 29 20:26:12 2025 GMT Subject: CN=68f93de5-a99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e8:8b:08:84:2f:64:94:ed:ab:7a:07:cd:40: 44:be:63:d9:3b:43:76:43:36:43:aa:52:dd:d7:45: a3:e5:8c:d7:19:f2:a1:1c:9d:47:e6:d6:98:65:46: 68:08:c0:ab:4c:48:b7:09:d3:ee:6d:28:14:ef:66: a5:93:9b:e5:10:80:40:37:ad:e2:62:6e:41:ad:3c: d8:3f:8f:41:ae:4c:56:e5:2b:a7:e8:d5:a2:96:f6: 0c:5a:1b:da:64:51:b2:8a:43:ba:e8:4c:c2:45:3e: 11:70:84:23:d1:6c:93:36:53:14:c6:6f:ae:81:ac: 03:73:8d:ab:03:c7:3a:26:f7:fb:e6:5b:1b:16:19: 41:d7:7d:4d:6b:82:c0:9b:e2:d6:c0:ff:4a:49:a6: 37:ad:dd:ef:47:00:d2:20:a3:45:59:94:7b:12:31: fb:3f:67:ee:a6:13:5c:98:04:ac:1f:88:f7:f9:c7: 49:1a:cf:83:75:e9:e6:fa:ba:d8:2c:bf:c4:6c:12: a0:88:86:3d:12:1f:8f:08:71:9a:b2:ff:73:ba:5f: 43:2b:51:3b:1f:78:e2:e1:7b:66:28:89:c0:54:21: d3:d0:4e:f2:68:8e:45:f3:47:ed:37:0e:aa:d1:02: e7:11:41:da:95:62:eb:9c:e6:13:2a:c9:4b:47:7a: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E0:11:42:04:52:68:F5:93:25:A9:73:73:74:D8:27:16:E5:B8:4F X509v3 Authority Key Identifier: keyid:72:37:47:6C:FD:E4:15:0A:B9:50:97:AB:BA:0F:ED:ED:42:AD:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cjdHbP3kFQq5UJerug_t7UKtuas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4FE6/BB09582C7DD411EA94BEAF79C4F9AE02/cjdHbP3kFQq5UJerug_t7UKtuas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:65:c2:1e:49:46:67:9b:c6:48:40:0e:40:53:b5:e9:aa:70: cd:85:94:3b:b7:77:64:7e:42:9e:e4:25:70:a4:de:2f:ca:36: 07:0b:c9:d2:09:0a:25:2c:e9:e7:cb:ad:93:09:cf:ac:a0:90: c9:df:93:b5:84:8c:4d:b4:3f:34:0e:0c:90:f7:87:23:17:b5: 68:1d:4f:2d:a9:41:58:52:07:60:1a:e7:79:f7:de:92:3e:6d: 6c:e5:64:0e:bb:22:5c:da:17:41:2b:5b:4d:a9:02:32:ee:d1: 6f:3f:62:b8:ba:82:ec:5c:3d:8b:78:4d:87:ab:97:21:d9:de: 71:1c:b0:f9:93:56:52:7d:e3:c8:19:5d:2b:f1:09:ad:1c:04: cf:b1:62:d6:69:b3:08:76:7d:2e:ae:4e:df:2e:f9:44:4e:44: 39:3d:2d:05:b7:27:de:e0:29:e8:11:11:31:1b:9d:c5:f5:65: f3:5b:75:b8:84:ba:45:20:4c:6a:f7:04:4d:ba:96:76:e5:82: ae:60:be:ff:3d:f0:5d:0f:8e:58:b3:4b:00:0d:c1:7b:9c:99: 5e:9a:a3:d4:9c:cb:d2:ec:70:5d:93:c5:16:5c:66:67:16:f8: 90:5e:14:c6:de:91:ee:93:bf:f7:86:d0:eb:4a:e8:bd:1e:d1: 3a:39:49:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRGRTYxMTAvBgNVBAUTKDcyMzc0NzZDRkRFNDE1MEFCOTUwOTdBQkJBMEZFREVE NDJBREI5QUIwHhcNMjUxMDIyMjAyNjEyWhcNMjUxMDI5MjAyNjEyWjAYMRYwFAYD VQQDEw02OGY5M2RlNS1hOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOiLCIQvZJTtq3oHzUBEvmPZO0N2QzZDqlLd10Wj5YzXGfKhHJ1H5taYZUZo CMCrTEi3CdPubSgU72alk5vlEIBAN63iYm5BrTzYP49BrkxW5Sun6NWilvYMWhva ZFGyikO66EzCRT4RcIQj0WyTNlMUxm+ugawDc42rA8c6Jvf75lsbFhlB131Na4LA m+LWwP9KSaY3rd3vRwDSIKNFWZR7EjH7P2fuphNcmASsH4j3+cdJGs+Ddenm+rrY LL/EbBKgiIY9Eh+PCHGasv9zul9DK1E7H3ji4XtmKInAVCHT0E7yaI5F80ftNw6q 0QLnEUHalWLrnOYTKslLR3q3jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrgEUIE Umj1kyWpc3N02CcW5bhPMB8GA1UdIwQYMBaAFHI3R2z95BUKuVCXq7oP7e1Crbmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEZFNi9CQjA5NTgyQzdE RDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZRcTVVSmVydWdfdDdVS3R1 YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NqZEhiUDNrRlFxNVVKZXJ1Z190N1VLdHVhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEZFNi9CQjA5NTgyQzdERDQxMUVBOTRCRUFGNzlDNEY5QUUwMi9jamRIYlAza0ZR cTVVSmVydWdfdDdVS3R1YXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdZcIeSUZnm8ZIQA5AU7XpqnDNhZQ7t3dkfkKe5CVwpN4vyjYHC8nS CQolLOnny62TCc+soJDJ35O1hIxNtD80DgyQ94cjF7VoHU8tqUFYUgdgGud5996S Pm1s5WQOuyJc2hdBK1tNqQIy7tFvP2K4uoLsXD2LeE2Hq5ch2d5xHLD5k1ZSfePI GV0r8QmtHATPsWLWabMIdn0urk7fLvlETkQ5PS0Ftyfe4CnoERExG53F9WXzW3W4 hLpFIExq9wRNupZ25YKuYL7/PfBdD45Ys0sADcF7nJlemqPUnMvS7HBdk8UWXGZn FviQXhTG3pHuk7/3htDrSui9HtE6OUnh -----END CERTIFICATE-----Generated at Fri Oct 24 06:02:51 2025 by rpki-client